This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json) Hash identifier: OnAVxfBVKqQgYDAFJS8cQ6ud+Y68dh6QpujIN7iY9/A= Subject key identifier: 17:71:EA:68:E4:4B:69:8E:AE:95:E7:17:FE:3B:6A:73:A9:2A:C0:2C Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019AF1D205EC571A951C1F44715BC06DA237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft Manifest number: 12ED Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=) 2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: XTXImZHvFYFF9L9TCeBV1/zmo78apnqQ6i225Utsqns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:ec:57:1a:95:1c:1f:44:71:5b:c0:6d:a2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=1771ea68e44b698eae95e717fe3b6a73a92ac02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:3a:e0:4c:f4:63:95:63:7f:14:3a:57:ac: 2c:9f:f9:fc:51:19:25:71:3d:1b:89:3a:fa:92:3e: fa:c0:c6:0d:d2:90:e2:c8:bc:0b:59:89:39:86:f9: 94:54:7a:67:15:94:9e:73:cb:d3:e0:f9:19:b2:d1: 6e:f6:3d:0a:ac:17:8c:2b:37:c8:f1:da:05:8d:70: 00:26:d2:2c:d1:d1:83:6a:00:0f:47:87:90:0e:87: b8:86:52:7d:a5:d0:0b:f7:bc:a9:79:91:31:65:e1: 98:ee:54:5c:7c:1f:41:9a:b0:44:c6:cd:ac:26:ce: f8:c0:5e:a5:37:cb:d9:06:9e:b8:ad:de:21:0c:84: 76:5c:9c:cc:99:9f:99:51:16:1c:36:b9:be:dc:f2: ba:8b:48:3c:ed:ae:a0:0f:6a:6c:c5:15:de:8c:2c: 94:1b:00:c1:e3:ea:98:c3:81:89:c2:a0:ca:84:37: 63:fc:c6:e6:75:fd:ab:98:61:1a:70:1f:7c:e6:5c: 8f:01:b9:e0:68:3d:26:b6:b2:23:0c:95:ad:b0:47: 6c:6b:42:c6:20:0b:4c:04:55:06:9e:5a:43:e5:b0: 14:c7:02:f0:ee:cf:26:f0:ce:e7:29:03:8f:00:7c: 26:92:73:fa:8b:5b:dc:7e:70:04:26:f8:91:b7:07: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:71:EA:68:E4:4B:69:8E:AE:95:E7:17:FE:3B:6A:73:A9:2A:C0:2C X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:bb:7e:cd:6a:4b:0a:6f:b6:15:f9:47:df:ce:e4:84:6c: 55:cd:16:0e:88:67:67:82:3c:fd:e6:00:1a:05:1e:cd:fc:4d: 62:21:0a:a1:aa:97:46:b2:85:c6:28:58:17:70:41:1b:90:51: 53:87:44:5e:19:70:e2:bd:9c:92:88:63:18:98:b0:52:f2:7c: d4:0e:8d:20:8a:29:b4:59:ed:e7:9e:c1:1b:0c:c6:c8:48:25: ad:9b:8f:39:b5:8f:60:b5:a2:fe:1b:8d:55:4c:60:8c:7a:fc: c8:5a:92:ae:e2:47:22:43:ca:79:34:fa:ec:7a:53:0d:ac:1a: f6:a1:75:cf:e5:2d:9f:d8:43:03:57:36:1b:3c:af:81:fb:e4: dd:54:d2:9a:f8:2a:91:c9:84:d5:ca:c0:50:95:fd:fe:41:9d: 71:55:ff:ca:3c:52:7c:52:a4:46:c3:03:29:95:c3:f2:10:8b: 0f:bd:03:60:6f:a7:29:b5:4e:b2:5a:13:99:ac:d4:87:b2:42: 3d:0d:d4:c1:33:18:07:0f:4c:8e:3e:b2:d9:c7:eb:34:f0:50: 1d:f4:b4:8b:ff:e4:1c:4b:d8:58:b6:39:b9:4b:ba:08:fe:7e: 2d:38:38:ab:f9:72:cd:13:3c:34:c0:6c:8d:59:c0:71:c6:e6: 3c:06:cc:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gXsVxqVHB9EcVvAbaI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EygxNzcxZWE2OGU0NGI2OThlYWU5NWU3MTdmZTNiNmE3M2E5MmFjMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWA64Ez0Y5VjfxQ6V6wsn/n8URkl cT0biTr6kj76wMYN0pDiyLwLWYk5hvmUVHpnFZSec8vT4PkZstFu9j0KrBeMKzfI 8doFjXAAJtIs0dGDagAPR4eQDoe4hlJ9pdAL97ypeZExZeGY7lRcfB9BmrBExs2s Js74wF6lN8vZBp64rd4hDIR2XJzMmZ+ZURYcNrm+3PK6i0g87a6gD2psxRXejCyU GwDB4+qYw4GJwqDKhDdj/Mbmdf2rmGEacB985lyPAbngaD0mtrIjDJWtsEdsa0LG IAtMBFUGnlpD5bAUxwLw7s8m8M7nKQOPAHwmknP6i1vcfnAEJviRtwdFrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdx6mjkS2mOrpXnF/47anOpKsAsMB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZe7fs1q SwpvthX5R9/O5IRsVc0WDohnZ4I8/eYAGgUezfxNYiEKoaqXRrKFxihYF3BBG5BR U4dEXhlw4r2ckohjGJiwUvJ81A6NIIoptFnt557BGwzGyEglrZuPObWPYLWi/huN VUxgjHr8yFqSruJHIkPKeTT67HpTDawa9qF1z+Utn9hDA1c2Gzyvgfvk3VTSmvgq kcmE1crAUJX9/kGdcVX/yjxSfFKkRsMDKZXD8hCLD70DYG+nKbVOsloTmazUh7JC PQ3UwTMYBw9Mjj6y2cfrNPBQHfS0i//kHEvYWLY5uUu6CP5+LTg4q/lyzRM8NMBs jVnAccbmPAbMUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:12 2025 by rpki-client